NVIDIA ChatRTX Vulnerability Could Lead to Information Disclosure and Privilege Escalation
CVE-2024-0096

7.5HIGH

Key Information:

Vendor
Nvidia
Status
Chatrtx
Vendor
CVE Published:
14 May 2024

Badges

📰 News Worthy

Summary

NVIDIA ChatRTX for Windows presents a vulnerability in its Chat RTX UI component that allows users to manipulate inputs in a way that changes the expected execution flow. This improper privilege management can potentially permit attackers to disclose sensitive information, escalate their privileges within the system, and tamper with critical data. It is essential for users to be aware of this vulnerability and take appropriate measures to mitigate associated risks.

Affected Version(s)

ChatRTX All versions prior to and including 0.2.1

News Articles

🔗CybersecurityNews

NVIDIA ChatRTX for Windows Vulnerability Lets Attackers Escalate Privileges

NVIDIA, a leading technology company, has recently released a security update regarding its Windows ChatRTX application.

9 months ago

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5533

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • 📰

    First article discovered by CybersecurityNews

  • Vulnerability Reserved

.